Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
File: au6rXTwAHVetswh4EhecgpIouCE.mft (raw, json)
Hash identifier: l9ivt8M9kN/WCibRZtyKIAjwI20I+Q/i1kpJ0SiF2ag=
Subject key identifier: 36:6A:D2:DB:43:99:AA:1F:24:00:22:C4:A8:4D:8B:E4:D0:5F:71:45
Authority key identifier: 6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21
Certificate issuer: /CN=6aeeab5d3c001d57adb3087812179c829228b821
Certificate serial: 019677FB48C102E0A7B27AECDDCC5575DF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 16:01:18 +0000
Manifest this update: Sun 27 Apr 2025 16:01:18 +0000
Manifest next update: Mon 28 Apr 2025 16:01:18 +0000
Files and hashes: 1: au6rXTwAHVetswh4EhecgpIouCE.crl (hash: tupxpyZ16Zo14iLIq3QSE8QCwN7Rul+rxFnxMFaDSjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:48:c1:02:e0:a7:b2:7a:ec:dd:cc:55:75:df:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeeab5d3c001d57adb3087812179c829228b821
Validity
Not Before: Apr 27 16:01:18 2025 GMT
Not After : Apr 28 16:01:18 2025 GMT
Subject: CN=366ad2db4399aa1f240022c4a84d8be4d05f7145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:fb:95:2e:d6:04:49:7c:0a:e3:14:bc:48:
b9:05:23:1c:2f:be:5c:f6:9a:04:35:eb:0d:57:78:
e9:96:de:ae:d9:76:a1:12:02:84:4d:16:ef:cc:08:
19:f6:bd:bc:7f:04:ae:85:0b:18:00:5c:dc:d5:9e:
74:c2:9c:3c:73:41:38:9c:a0:8a:b3:28:27:0e:6e:
9b:73:aa:f3:91:8d:ad:2e:f9:f4:9a:ae:7e:19:c4:
06:4e:15:b5:62:75:a4:78:7a:23:45:11:c7:1c:b1:
5a:01:0c:bb:eb:50:be:a0:0d:0f:98:b7:cc:ac:bf:
05:7e:87:0e:cc:93:4e:67:94:10:e7:ad:51:8d:ac:
13:7f:6b:8b:92:8a:68:a2:e7:18:05:00:32:bc:6f:
b3:83:6d:9b:aa:21:02:09:54:ca:bc:8e:35:3b:0a:
fa:ce:89:cc:7d:c2:86:1c:0e:79:00:b4:2f:96:bb:
5d:ed:88:15:27:6e:d5:65:33:b8:65:4e:6f:03:07:
2e:aa:9d:49:11:a8:73:58:0f:9c:b6:54:cf:e2:d0:
81:4c:19:1f:5d:ca:23:5a:d5:0b:5f:a7:77:ed:65:
f7:3b:58:fc:30:39:10:78:57:d2:40:2c:a1:03:83:
02:58:71:79:c0:79:5e:d7:80:c4:e4:fc:cd:55:b5:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:D2:DB:43:99:AA:1F:24:00:22:C4:A8:4D:8B:E4:D0:5F:71:45
X509v3 Authority Key Identifier:
keyid:6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b3:22:2d:42:e7:ae:fe:cb:ab:45:6b:1e:58:f9:e0:22:91:
45:be:7f:5c:6f:81:2c:62:91:98:3c:4b:a2:c0:36:d5:a8:c2:
e2:58:e0:2f:ca:a0:9b:a1:81:78:fe:4e:4d:e8:a7:98:88:bf:
eb:86:25:e8:99:b1:91:bc:95:08:e4:67:47:d4:1c:97:43:ad:
e0:a7:8a:29:9b:da:a8:0c:56:06:c0:20:8d:9d:d8:25:ab:a7:
d1:76:98:5b:91:e6:3d:87:6d:0a:59:43:21:09:7b:e1:70:07:
7c:e4:c5:11:bc:2b:09:2d:aa:d9:96:f1:20:3f:13:1d:c4:52:
94:da:79:a1:f5:58:da:2f:6d:40:88:f8:6d:c5:3f:d2:a9:ec:
d8:6a:1d:34:98:71:08:36:3c:40:9a:a7:5c:31:e3:3f:9d:a8:
4b:af:44:3f:b7:f0:7b:4e:98:08:0d:d2:0f:76:c0:91:a8:4b:
b6:7a:36:b6:22:0f:e3:b9:86:77:0d:f3:ff:b3:1a:d3:80:d7:
57:09:72:b9:13:b6:45:22:d3:49:07:74:7b:d8:68:bc:a4:79:
70:16:3f:41:f8:dc:f8:72:ce:49:ee:35:ad:f6:fd:fd:6d:7e:
46:7c:7e:f0:af:9f:72:06:31:f1:ff:8b:94:3e:2c:0a:94:f6:
19:8c:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:30 2025 by rpki-client